Biometric Certificate Authentication With Minimal Data Disclosure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online personal confirmation methods using electronic identification cards and biometric authentication face issues of convenience, accuracy, social acceptability, and privacy due to the need to present the card every time and reliance on face authentication, which is insufficient and discloses excessive personal information.
Innovation Solution
An authentication system utilizing a signature device that holds an electronic certificate and personal signature key, a registration terminal to generate registration authentication information, and an issuing server to verify the registrant's identity using the electronic certificate and personal signature, allowing any biometric method and minimal attribute disclosure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If face authentication using face image stored in electronic identification card is used, then personal authentication can be performed, but authentication accuracy is insufficient and social acceptability is poor
Solution Approach 1:
The patent changes the biometric parameter from face images to fingerprint information, which has higher recognition accuracy and better social acceptance. The system reads fingerprint information from the IC chip of the electronic identification card and compares it with fingerprint information obtained at the time of service provision, providing more reliable authentication.
2Reliability
If electronic identification card and face image are transmitted to service provision server, then verification can be performed, but excessive personal information is disclosed
Solution Approach 1:
The patent extracts only the necessary fingerprint information from the electronic identification card for authentication purposes, rather than transmitting the entire card data or face images. The service provision server only receives and verifies the fingerprint information, minimizing personal information disclosure while maintaining verification accuracy.
Solution Approach 2:
The patent introduces an intermediary authentication process where the terminal device performs initial authentication using fingerprint information from the electronic identification card, and only then provides service. This intermediary step prevents direct transmission of excessive personal information to the service provision server.
3Reliability
If electronic identification card must be presented every time for online personal confirmation, then identity verification can be performed, but convenience is reduced
Solution Approach 1:
The patent performs preliminary authentication by reading fingerprint information from the electronic identification card at the terminal device before service provision. The authenticated user can then access services without repeatedly presenting the physical card, as the fingerprint authentication has already verified their identity. This preliminary action maintains security while improving convenience.
Data Source
AI summary
Provided is an authentication system including: a signature device configured to hold an electronic certificate issued to an individual in advance and a personal signature key corresponding to the electronic certificate in association with each other; a registration terminal configured to generate registration authentication information from registration biometric information of a registrant and generate a personal signature for the registration authentication information using the signature device; and an issuing server configured to confirm that the registrant is the same person as a person of the electronic certificate by verifying the registration authentication information and the personal signature using the electronic certificate. Therefore, it is possible to provide a highly convenient authentication system and authentication method.